-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| io.quarkus:quarkus-cache | maven | >= 3.3.0.CR1, < 3.5.2 | 3.5.2 |
| io.quarkus:quarkus-cache | maven | >= 3.2.0.CR1, < 3.2.9.Final | 3.2.9.Final |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper context management in the CacheResultInterceptor. The pre-patch code did not:
The fix added context capture (Vertx.currentContext()) and a custom Executor with context restoration logic. The vulnerable function is clearly the intercept method where these critical context management operations were missing, allowing context mixing between cached operations and subsequent requests.